I got to thinking about how to obfuscate PHP code and ended up with this:
<?php
$code = 'JHggPSAwO3doaWxlICgkeDwxMCl7ZWNobyAkeC4nIGF3ZXNvbWUuPGJyIC8+JzsgJHgrKzt9';
eval(base64_decode($code));
Fairly straight forward but effective. Though you can decode it yourself and format it to read it. Anyone have a better method?
ioncube costs money. Also I tried using gzcompress() but I ran into some character encoding problems.
Sometimes a person needs to spend some money to get the job done
... I was talking about code methods anyways.
The best method to obfuscate your code is using ROT13 twice for better security.
I hardly see how ROT13 is any better then converting to base 64... explain?
(2010-12-04, 04:28 PM)frostschutz Wrote: [ -> ]The best method to obfuscate your code is using ROT13 twice for better security.
lol
Quote:ROT13 is its own inverse; that is, to undo ROT13, the same algorithm is applied, so the same action can be used for encoding and decoding. The algorithm provides no cryptographic security, and is often cited as a canonical example of weak encryption. ROT13 has inspired a variety of letter and word games on-line, and is frequently mentioned in newsgroup conversations.
btw, what is the point in encoding in base 64? Its really simple to decode
For example yours is:
Quote:$x = 0;while ($x<10){echo $x.' awesome.<br />'; $x++;}
Encryption isnt easy, because for PHP to read it you have to write a plain text script to tell PHP what to do with the files. So the end user can simply look for your decoding methed, and apply it manually to see your code
ROT13 is just as simple to decode, that's my point.
(2010-12-04, 07:41 PM)Anman Wrote: [ -> ]ROT13 is just as simple to decode, that's my point.
ROT13 can be decoded by using the inverse. frostschutz said _twice_, so by using it twice, you'll end up with the same code you tried to encode.
The best method is definitely an application which decodes the encoded file. The application must be installed on the server and must not be accessible by the user. In other words, something like ionCube. Everything else can be decrypted by using the key which is stored inside the file, unless you get the key from somewhere else, but that way anyone can get the key as well. So, yes only something like ionCube. Let me know if I'm incorrect.